@esbuild/netbsd-x64

Repo bus factorcaution

One contributor made about 91% of the 34 recent commits, so maintenance is highly concentrated despite three additional contributors being active.

Repo package mentioncaution

The linked repository neither matches this package name nor mentions it in its README, so the package-to-repository relationship is less explicit than ideal; its README does identify the repository as the esbuild source project.

Repo toolingcaution

The project uses build tooling, but no security-scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All four workflows were analyzed and all 19 action references are pinned, with no untrusted checkout or script-injection path. However, one workflow has top-level write permissions, and the audit found a high-severity cache-poisoning pattern at low confidence plus archived and ad hoc package-use findings, so workflow hygiene remains a caution rather than a severe risk.